VendorsCybozuoffice6
Vulnerabilities

Cybozu Office 6

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

4CVEs
CVE-2011-2677
Cybozu Office before 8.0.0 allows remote authenticated users to bypass intended access restrictions and access sensitive information (time card and attendance) via unspecified vectors related to manipulation of a URL.
Published 2011-10-21 · Modified
5.5EPSS 0.012
CVE-2011-1335
Cross-site scripting (XSS) vulnerability in Cybozu Office 6, 7, and 8 before 8.1.1 allows remote attackers to inject arbitrary web script or HTML via vectors related to the "address book and user list functions."
Published 2011-06-29 · Modified
4.3EPSS 0.013
CVE-2011-1333
Cross-site scripting (XSS) vulnerability in Cybozu Office 6 and Cybozu Garoon 2.0.0 through 2.1.3 allows remote attackers to inject arbitrary web script or HTML via vectors related to "downloading graphic files from the bulletin board system."
Published 2011-06-29 · Modified
4.3EPSS 0.012
CVE-2011-1334
Cross-site scripting (XSS) vulnerability in Cybozu Office 6, Cybozu Garoon 2.0.0 through 2.1.3, Cybozu Dezie before 6.1, Cybozu MailWise before 3.1, and Cybozu Collaborex before 1.5 allows remote attackers to inject arbitrary web script or HTML via vectors related to "downloading graphic files from the mail system."
Published 2011-06-29 · Modified
4.3EPSS 0.012